With DNSSEC Active, DNSChecker.org is showing a strange DNS record

[rob28]

Cheers, and thanks for your time. I’m attempting to install WordPress on my new domain - collr.me - and continually have issues, despite repeating a time-tested and oft-repeated routine of purchasing a domain name, getting it set up with my hosting, and getting Cloudflare cooking.

Despite setting everything up more than 24 hours ago, DNSChecker.org https://dnschecker.org/#A/collr.me shows DNS entries I have never seen affiliated with the domain. My current DNS settings do not contain an entry with the same A Records. https://paste.pics/890b33e177ea9d1bfda88b973b5ccf30

Googling led me to activating DNSSEC, which is something I have only today’s experience with. I still am unable to access my WordPress install, and DNSChecker.org is still showing what is evidently a Cloudflare A Record.

Any help is HUGELY appreciated and I thank you for your time.

Rob G.

[erictung]

If you understand how Cloudflare works, then you will know that DNS query will return Cloudflare IP addresses because Cloudflare is essentially sitting in front of your servers as a reverse proxy.

https://support.cloudflare.com/hc/en-us/articles/205177068-How-does-Cloudflare-work-#:~:text=Cloudflare%20masks%20your%20origin%20IP,attack%20your%20origin%20web%20server.&text=A%20DNS%20lookup%20of%20an,ve%20entered%20for%20the%20record.

[rob28]

I appreciate the heads-up!

[erictung]

@rob28

I still am unable to access my WordPress install,

By the way, are you using Flexible SSL mode?

[rob28]

Yeah - I am using Flexible - I’m still getting

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

[erictung]

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…

Deprecated - Why flexible SSL mode is not the best choice

This tutorial is deprecated in favour of Flexible - SSL/TLS encryption modes · Cloudflare SSL/TLS docs Related Content:

Archive

Flexible The connection between your visitor and Cloudflare is secured, but the connection between Cloudflare and your server is not. You will not need a certificate on your server for this mode. This option is NOT RECOMMENDED. Flexible makes your site only partially secure - it encrypts the connection between the visitor and Cloudflare - this means they see the :ssl…

This may explain why you have issues accessing your WordPress installation.